ImplementingRegulationPersonalDataProtectionLaw

Interest Purposes When a Public Entity collects Personal Data not directly from the Data Subject, processes it for a purpose other than the one for which it was initially collected, or requests Disclosure of such data to achieve a public interest, the Public Entity shall comply with the following: a) Ensure that this is necessary to achieve a clearly defined public interest. b) The public interest related to Public Entity’s mandate as specified in the regulation. c) Take suitable measures to limit the damage that may result, including implementing necessary administrative and technical controls to ensure its agents commit to comply with the provisions of Article 41 of the Law. d) Record those operations in the records of Personal Data Processing activities. e) Collect and Process the minimum necessary Personal Data to achieve data Processing purpose. Public